CertifyDeckCargando contenido…
The official Microsoft 365 Certified: Microsoft 365 and AI Services Administrator Associate syllabus, organized by domain. Check off each point as you review it.
Inicia sesión para guardar tu progreso entre sesiones.
Configure and manage a Microsoft 365 tenant
The organization theme controls the logo, colors, and text shown in the top navigation bar of Microsoft 365, and it's configured under Org settings > Organization profile > Custom themes; only global administrators can change it. A tenant supports up to five themes (one default plus four group themes, which can only be linked to Microsoft 365 groups). Sign-in page branding (illustration, banner logo) is configured separately, through Microsoft Entra ID.
Customize the theme for your organization ↗Add your Company Branding to the Microsoft 365 Sign-In page ↗
Adding, modifying, or removing a custom domain in Microsoft 365 requires the Domain Name Administrator role. If the registrar supports Domain Connect, ownership and DNS records are confirmed automatically; otherwise ownership is verified manually with a TXT record, an MX record, or a text file on the website. The fallback onmicrosoft.com domain is created automatically, a tenant is limited to five in total, and once created they can't be deleted.
Add a Custom Domain to Microsoft 365 ↗Add or replace a onmicrosoft.com fallback domain ↗
Within Org settings, the Security & privacy tab holds the password expiration policy (passwords never expire by default; the User administrator role is required), and the Organization profile tab holds release preferences, where you choose standard release or targeted release for the whole organization or for selected users, which requires the Global administrator role. Changing the default operating system for Cloud PCs, on the Services tab, only affects Cloud PCs created after the change.
Set the password expiration policy for your organization ↗Set up the Standard or Targeted release options for Microsoft 365 ↗
Group-based licensing lets you assign licenses to security groups, mail-enabled groups, or Microsoft 365 groups from Billing > Licenses, and requires at least the Groups Administrator, License Administrator, or User Administrator role; it doesn't support nested groups, and the Errors & issues tab shows assignment failures. Pay-as-you-go billing connects an Azure subscription to a billing policy with an optional budget, but reaching 100% of the budget doesn't stop the service — only disconnecting the payment method does.
Assign or unassign licenses to a group in the Microsoft 365 admin center ↗Configure Pay-As-You-Go Billing in the Billing Node ↗
Administrators monitor AI service licenses across portals: the Microsoft 365 admin center shows Copilot reports via the AI Administrator role, Power Platform manages Copilot Studio capacity per environment, and Purview audits Copilot activity. Agent 365 is licensed per user, and its agent registry limits governance actions to the AI Administrator or Global Administrator roles.
Microsoft Copilot reports for IT admins ↗Agent overview in Microsoft 365 admin center ↗
Microsoft 365 Backup protects OneDrive accounts, SharePoint sites, and Exchange mailboxes through policies that define scope and a recovery window. Initial setup requires the SharePoint Administrator or Global Administrator role. Restores can either replace original content or recreate it in a new location, and email notifications flag harmful events such as removing protection units or offboarding backups.
Overview of Microsoft 365 Backup ↗Set up Microsoft 365 Backup ↗
Network connectivity in the Microsoft 365 admin center, under Health > Network connectivity, aggregates performance metrics from Microsoft 365 apps and shows an assessment score per tenant and per office location. Locations are identified via Windows Location Services, by adding LAN subnets, or with the connectivity test tool. Network insights flag HTTPS or WebSocket connectivity failures, or TLS interception.
Network connectivity in the Microsoft 365 Admin Center ↗Microsoft 365 Network Insights ↗
The Service health page in the Microsoft 365 admin center, under Health > Service health, distinguishes advisories, where the service stays available, from incidents, where a major function is unavailable. Admins with the Service Support or Helpdesk admin role can view it, configure email notifications, and review history. Planned maintenance is announced in Message center instead, not here.
Manage Microsoft 365 workloads
A shared mailbox lets several people read and send mail from a common address without an account for each of them. Access is granted with three delegate permissions: Full Access to open and manage the contents, Send As so the message appears to come from the mailbox, and Send on Behalf, which shows who sent it. If a delegate holds the last two, Exchange Online uses Send As.
Shared mailboxes in Exchange Online ↗Manage permissions for recipients in Exchange Online ↗
Whoever creates a team in Microsoft Teams becomes its owner. Owners can delete the team, add members to a private team and promote or demote other users; members cannot. Standard channels are open to the whole team, private channels limit membership to part of it, and shared channels let you bring in people or other teams without adding them to the team.
Assign team owners and members in Microsoft Teams admin center ↗Overview of teams and channels in Microsoft Teams ↗
Copilot availability in meetings is set in the meeting policies of the Teams admin center, next to recording and transcription, and also with Set-CsTeamsMeetingPolicy. The administrator decides whether Copilot requires a saved transcript or whether the organizer can choose. When the organizer turns Copilot off for a meeting, recording and transcription are turned off with it.
Manage Microsoft Copilot in Teams meetings and events ↗Admins - Manage transcription and captions for Teams meetings ↗
A SharePoint administrator creates team sites, connected to a Microsoft 365 group, or communication sites. In the former, permissions are managed through the group's owners and members; in the latter, through the SharePoint owners, members and visitors groups. External sharing must first be allowed at the organization level before it can be turned on for a specific site.
Create a site - SharePoint in Microsoft 365 ↗Sharing & permissions in the SharePoint modern experience ↗
Restricted Content Discovery hides a SharePoint site's content from Copilot and from organization-wide search without changing its permissions. Restricted Access Control, by contrast, limits who can enter the site to a defined group. The data access governance reports in SharePoint Advanced Management help locate sites at risk of oversharing before Copilot is rolled out more widely.
Restrict discovery of SharePoint sites and content ↗Get ready for Microsoft Copilot with SharePoint Advanced Management ↗